$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft File: j6qb2dr2dE3JnQBbAkor2_EAdkE.mft (raw, json) Hash identifier: mSxlP0Nm7mAcpSpvHeqBWQypp7TE9Et9+Dm2SiQvaU0= Subject key identifier: 77:18:73:C5:32:54:50:56:D7:78:6B:E1:E4:24:E5:59:CA:BF:B0:C7 Authority key identifier: 8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41 Certificate issuer: /CN=A9113BB0/serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft Manifest number: 32 Signing time: Thu 21 Aug 2025 07:51:32 +0000 Manifest this update: Thu 21 Aug 2025 07:51:32 +0000 Manifest next update: Thu 28 Aug 2025 07:51:32 +0000 Files and hashes: 1: j6qb2dr2dE3JnQBbAkor2_EAdkE.crl (hash: Cwacffpngo9ltAtIfIafvWVqncMMU+tRVhWKfL+ysM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641 Validity Not Before: Aug 21 07:51:32 2025 GMT Not After : Aug 28 07:51:32 2025 GMT Subject: CN=68a6d004-987c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:62:8b:61:b8:37:1b:d9:f3:14:16:52:c1: d2:8a:a5:94:ab:aa:f0:64:bd:87:53:46:3b:a5:19: c3:6e:f0:de:b3:9d:cf:d2:9a:8e:63:c3:1d:3b:df: 7b:d4:0b:bb:7d:f7:38:f0:a0:e4:db:2b:f3:56:8c: 88:53:04:92:14:7a:12:f5:e8:c8:01:e4:1d:b9:70: e5:a9:c6:80:7e:8b:3d:95:c9:e2:5c:76:ea:ed:4b: 63:cf:70:46:ed:b2:56:a0:ac:45:eb:9e:9b:4d:d4: fa:23:0e:8a:48:2e:6e:e0:94:5c:fc:93:46:99:5e: da:c5:ef:41:bb:eb:99:94:57:7f:0b:e5:bc:57:ed: 9b:50:1f:e8:bb:9e:8f:f5:25:66:ab:ea:e5:1b:91: 89:b7:5d:d4:76:28:fa:ab:8c:22:e5:7b:85:58:06: fb:11:4a:7b:09:8f:92:cc:f8:f6:c9:3b:86:dd:a2: 58:c1:ad:5f:7e:bb:d6:60:63:1a:e7:90:14:e0:a2: d6:8f:cd:51:91:c3:46:ff:20:a2:4e:14:86:aa:39: cf:01:e2:64:f9:7f:76:11:a4:8f:be:d7:07:66:a1: e6:d5:69:38:80:56:91:91:75:ad:d6:8b:30:5d:23: b3:ee:6d:21:50:17:ee:da:84:29:f2:cc:34:d0:de: 6a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:18:73:C5:32:54:50:56:D7:78:6B:E1:E4:24:E5:59:CA:BF:B0:C7 X509v3 Authority Key Identifier: keyid:8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d1:db:d2:a7:45:c5:37:84:e9:ff:ae:e8:cc:6b:94:de:61: 46:13:57:c2:6a:6d:bd:9f:b7:b0:f4:9b:5e:75:74:24:a4:1a: ba:9a:39:a1:7f:e8:b3:cd:2a:1b:04:6f:77:ee:20:58:d0:ef: f9:f3:fa:23:07:0a:82:b3:c6:a4:8a:47:b1:d3:81:ad:33:eb: 4c:98:c2:cf:23:2b:1b:e3:c4:2f:7a:30:18:f3:b5:ed:2e:d6: f3:76:2b:dd:8e:fd:f7:b6:7d:9f:65:18:2d:85:1a:09:dd:dc: 94:ed:3d:d9:12:78:bc:1b:2e:29:85:ff:8d:43:ff:77:eb:54: e9:91:88:16:d2:04:e9:0c:09:17:c5:f2:d8:69:a2:63:9e:4b: 8f:f1:c8:d1:a0:4b:62:db:f9:e6:d2:bf:cb:16:12:9f:93:bf: 3a:be:d6:3b:94:15:6e:d2:f3:b9:fb:39:38:35:39:6c:9d:6a: a4:d8:4c:cc:fb:3a:15:0a:6d:ac:1d:06:31:90:ce:97:1e:99: 6e:7a:2d:ca:12:42:8a:d8:6a:17:4d:26:16:2e:be:7b:79:c3: ad:6c:8f:74:82:7f:9e:ee:69:c6:22:0a:45:ec:10:d3:d0:1c: 30:9e:10:ed:ee:e6:de:90:e6:b9:00:0b:b3:33:c9:ab:1a:32: 95:2b:a8:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoOEZBQTlCRDlEQUY2NzQ0REM5OUQwMDVCMDI0QTJCREJG MTAwNzY0MTAeFw0yNTA4MjEwNzUxMzJaFw0yNTA4MjgwNzUxMzJaMBgxFjAUBgNV BAMTDTY4YTZkMDA0LTk4N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB3WKLYbg3G9nzFBZSwdKKpZSrqvBkvYdTRjulGcNu8N6znc/Smo5jwx0733vU C7t99zjwoOTbK/NWjIhTBJIUehL16MgB5B25cOWpxoB+iz2VyeJcdurtS2PPcEbt slagrEXrnptN1PojDopILm7glFz8k0aZXtrF70G765mUV38L5bxX7ZtQH+i7no/1 JWar6uUbkYm3XdR2KPqrjCLle4VYBvsRSnsJj5LM+PbJO4bdoljBrV9+u9ZgYxrn kBTgotaPzVGRw0b/IKJOFIaqOc8B4mT5f3YRpI++1wdmoebVaTiAVpGRda3WizBd I7PubSFQF+7ahCnyzDTQ3mpZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdxhzxTJU UFbXeGvh5CTlWcq/sMcwHwYDVR0jBBgwFoAUj6qb2dr2dE3JnQBbAkor2/EAdkEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwL0E4ODYxNUVFMzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL2o2cWIyZHIyZEUzSm5RQmJBa29yMl9FQWRr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvajZxYjJkcjJkRTNKblFCYkFrb3IyX0VBZGtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwL0E4ODYxNUVFMzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL2o2cWIyZHIyZEUz Sm5RQmJBa29yMl9FQWRrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADrR29KnRcU3hOn/rujMa5TeYUYTV8Jqbb2ft7D0m151dCSkGrqaOaF/ 6LPNKhsEb3fuIFjQ7/nz+iMHCoKzxqSKR7HTga0z60yYws8jKxvjxC96MBjzte0u 1vN2K92O/fe2fZ9lGC2FGgnd3JTtPdkSeLwbLimF/41D/3frVOmRiBbSBOkMCRfF 8thpomOeS4/xyNGgS2Lb+ebSv8sWEp+Tvzq+1juUFW7S87n7OTg1OWydaqTYTMz7 OhUKbawdBjGQzpcemW56LcoSQorYahdNJhYuvnt5w61sj3SCf57uacYiCkXsENPQ HDCeEO3u5t6Q5rkAC7MzyasaMpUrqP4= -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:48 2025 by rpki-client